Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

(C) drive loses space by itself very fast.


  • Please log in to reply
6 replies to this topic

#1 byrgesen

byrgesen

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:38 AM

Posted 29 July 2015 - 06:11 AM

Hi and thank you in advance :).
 
I'll get straight to the point!
My © drive is constantly losing space, every 10-20 sec or so it can lose from 500kb to 10 mb of space. Currently keeping it in check by removing repeatedly generating files such as pc optimizers.
 
I've tried a few programs such as ccleaner, adw, JRT (those are the ones keeping it in check), though I cannot seem to find the main problem, the one that is automatically downloading crap files such as optimizers at all times
 
Last night I was down to about 2gigs and got a bsod. At the moment I'm at 10gigs or so and the pc is functioning fine, as long as i keep keeeping it in check.
 
Heres a link showing my diskspace reducing itself. Now this was in a very few seconds, sometimes it is way more. http://imgur.com/6nWRA2z
 
Any help will be appreciated! Thanks =)


Edited by hamluis, 30 July 2015 - 07:52 AM.
Moved from BSOD forum to Windows 7 to AII


BC AdBot (Login to Remove)

 


m

#2 jcgriff2

jcgriff2

  • BSOD Kernel Dump Expert
  • 1,052 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey Shore
  • Local time:04:38 AM

Posted 30 July 2015 - 03:09 AM

Hi . ..

Your screenshot shows a variance of 4k of space. Your post mentions swings of 8 GB.

What files are you deleting to reduce the space? Or is the system doing it?

Windows System Restore would be my first guess - http://www.sysnative.com/forums/windows-8-windows-rt-tutorials/10752-windows-system-restore-configure-restore-point-space-windows-10-8-1-8-7-vista.html

Regards. . .

jcgriff2
Microsoft MVP 2009-2015

#3 byrgesen

byrgesen
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:38 AM

Posted 30 July 2015 - 06:27 AM

Hi, thanks for the reply.

 

Well I'm not exactly sure how it works, but my drive is slowly getting filled with crap.. When I browse google chrome I also recieve random pop ups to other sites, that I never got earlier.

 

I've a log file from ADW from yesterday.

 

Here:

# AdwCleaner v4.208 - Logfile created 29/07/2015 at 12:17:35
# Updated 09/07/2015 by Xplode
# Database : 2015-07-26.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : ByrgeFar - BYRGEFAR-PC
# Running from : E:\adwcleaner_4.208 (1).exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\WebShield
Folder Deleted : C:\Users\ByrgeFar\AppData\Local\WebShield
File Deleted : C:\Users\ByrgeFar\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
File Deleted : C:\Users\ByrgeFar\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\HomeTab
Key Deleted : HKCU\Software\simplytech
Key Deleted : HKCU\Software\TNT2
Key Deleted : HKCU\Software\SearchProtectWS
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\Kromtech
Key Deleted : HKCU\Software\AppDataLow\Software\DynConIE
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Iminent
Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
Key Deleted : HKLM\SOFTWARE\SearchProtect
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\Uniblue
Key Deleted : HKLM\SOFTWARE\IHProtect
Key Deleted : HKLM\SOFTWARE\SpeedBit
Key Deleted : HKLM\SOFTWARE\AIM Toolbar
Key Deleted : HKLM\SOFTWARE\searchult
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebShield
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:50456;hxxps=127.0.0.1:50456
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
 
***** [ Web browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17280
 
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
 
-\\ Google Chrome v44.0.2403.125
 
[C:\Users\ByrgeFar\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Homepage] : hxxp://www.istartsurf.com/?type=hp&ts=1438131044&z=8cb0f3cae5a09ab87c4532cgazfc8b2g1cae5t3tfc&from=tugs&uid=WDCXWD20EFRX-68EUZN0_WD-WCC4M126588765887
[C:\Users\ByrgeFar\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Startup_URLs] : 7691F55D781EF8926B4C738938AAF7842B4082B0B5062C7FEC8C156F179DFBE5"},"software_reporter":{"prompt_reason":"371157BA6DAB4A60C5531A35CEA5BC3FBB2F39CE0B5E2C39F9D73CE88CB99EEB","prompt_seed":"937C0D1F83AAE0E7A739EA4EAFC122BB030B0D751F094D030AEC6F155A27E0C5","prompt_version":"73EC7E822BBF3839A6F2AA20A52D14FD75CAEAD5C1878D968ED803E176EC76FC"},"sync":{"remaining_rollback_tries":"702F89194DC230BD7938DE95E1E3131CDDEF76D76BAEC93866F1A151A74CAE60"}},"super_mac":"3D639481ADBF5B3269B777419B93823667708620271CB90BE053122068BAF550"},"session":{"restore_on_startup":4,"startup_urls":["hxxp://www.istartsurf.com/?type=hp&ts=1438131044&z=8cb0f3cae5a09ab87c4532cgazfc8b2g1cae5t3tfc&from=tugs&uid=WDCXWD20EFRX-68EUZN0_WD-WCC4M126588765887
 
*************************
 
AdwCleaner[R0].txt - [9542 bytes] - [29/07/2015 02:42:36]
AdwCleaner[R1].txt - [7668 bytes] - [29/07/2015 12:13:52]
AdwCleaner[R2].txt - [7731 bytes] - [29/07/2015 12:17:16]
AdwCleaner[S0].txt - [3800 bytes] - [29/07/2015 02:43:05]
AdwCleaner[S1].txt - [6176 bytes] - [29/07/2015 12:17:35]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6235  bytes] ##########
 
I have not created a system restore point, and would be sad to lose all of my files. If any other solution is there it would be much appreciated!


#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,076 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:38 AM

Posted 30 July 2015 - 08:08 AM

Looks to me like you might be infected.  Conduit and Search Protect are biggies - and they invite their buddies along for the ride!

 

I'd suggest posting over in the Am I Infected forum:  http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/
Please read the pinned topics at the top of the forum for instructions on how to post there.

 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 byrgesen

byrgesen
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:38 AM

Posted 30 July 2015 - 09:35 AM

Thanks! I will check it out =)



#6 jcgriff2

jcgriff2

  • BSOD Kernel Dump Expert
  • 1,052 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey Shore
  • Local time:04:38 AM

Posted 30 July 2015 - 03:41 PM

@ usasma - Thank you.

 

Good catch.


Microsoft MVP 2009-2015

#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,076 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:38 AM

Posted 02 August 2015 - 05:02 AM

Thanks John!  We see it all the time at work and it causes many, many different problems for us there!


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users